IN THE CLAIMS 
This listing of claims replaces all prior listings. 

1 . (currently amended) A method in a data processing system having a program, the method 
comprising the steps performed by the program of: 

asynchronously receiving information about a computer-based system by subscribing to the 
information ; and 

calculating a risk level at which the computer-based system operates based on the received 
information. 

2. (original) The method according to claim 1 , further comprising the step of outputting the 
calculated risk level. 

3. (original) The method according to claim 1, further comprising the steps of: 
calculating an exposure level to failure of the computer-based system based on the received 

information; and 

calculating a confidence level of the exposure level, 

wherein the risk level is calculated based on the exposure level and confidence level. 

4. (original) The method according to claim 3, wherein the risk level is calculated using the 
formula: 

risk level = exposure level * confidence level / a mitigating factor, 

where the mitigating factor is a value associated with the computer-based system. 

5. (original) The method according to claim 3, wherein the confidence level is increased 
each time the exposure level for the computer-based system is calculated and exceeds a 
predetermined value. 

6. (original) The method according to claim 3, wherein a rule engine is used to calculate the 
exposure level, the rule engine asynchronously receiving the information about the computer-based 
system as an input, and outputting the exposure level as an output. 
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7. (original) The method according to claim 6, wherein the rule engine comprises a plurality 
of rule engines each operating asynchronously; and wherein the risk level is calculated based on the 
exposure levels output from at least one of the rule engines. 

8. (original) The method according to claim 1, wherein the computer-based system is at 
least one of a data processing system, a component of a data processing system, and a computer 
program. 

9. (canceled). 

10. (original) The method according to claim 1, wherein the risk level is published to a 
network connected to the data processing system. 

1 1 . (original) The method according to claim 1 , wherein the received information comprises 
at least one of fault information, hardware configuration information, and software configuration 
information about the computer-based system. 

12. (original) The method according to claim 1, further comprising the step of: 
determining a difficulty value for reducing the exposure level. 

13. (original) The method according to claim 12, further comprising the step of: 
outputting the difficulty value. 

14. (original) The method according to claim 12, further comprising the step of: 
determining a cost associated with reducing the exposure level. 

15. (original) The method according to claim 14, further comprising the step of: 
outputting the cost. 

16. (original) The method according to claim 1, further comprising the steps of: 
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calculating at least a second risk level at which the computer-based system operates based on 
the received information; and 

trending the risk level and the at least second risk level by calculating a moving average of 
the risk levels for the computer-based system. 

17. (currently amended) A computer-readable storage medium containing instructions that 
cause a data processing system having a program to perform a method comprising the steps 
performed by the program of: 

asynchronously receiving information about a computer-based system by subscribing to the 
information ; and 

calculating a risk level at which the computer-based system operates based on the received 
information. 

18. (currently amended) The computer-readable storage medium according to claim 17, 
further comprising the step of outputting the calculated risk level. 

19. (currently amended) The computer-readable storage medium according to claim 17, 
further comprising the steps of: 

calculating an exposure level to failure of the computer-based system based on the received 
information; and 

calculating a confidence level of the exposure level, 

wherein the risk level is calculated based on the exposure level and confidence level. 

20. (currently amended) The computer-readable storage medium according to claim 19, 
wherein the risk level is calculated using the formula: 

risk level = exposure level * confidence level / a mitigating factor, 

where the mitigating factor is a value associated with the computer-based system. 

21. (currently amended) The computer-readable storage medium according to claim 19, 
wherein the confidence level is increased each time the exposure level for the computer-based 
system is calculated and exceeds a predetermined value. 
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22. (currently amended) The computer-readable storage medium according to claim 19, 
wherein a rule engine is used to calculate the exposure level, the rule engine asynchronously 
receiving the information about the computer-based system as an input, and outputting the exposure 
level as an output. 

23. (currently amended) The computer-readable storage medium according to claim 22, 
wherein the rule engine comprises a plurality of rule engines each operating asynchronously; and 
wherein the risk level is calculated based on the exposure levels output from at least one of the rule 
engines. 

24. (currently amended) The computer-readable storage medium according to claim 17, 
wherein the computer-based system is at least one of a data processing system, a component of a 
data processing system, and a computer program. 

25. (canceled). 

26. (currently amended) The computer-readable storage medium according to claim 17, 
wherein the risk level is published to a network connected to the data processing system. 

27. (currently amended) The computer-readable storage medium according to claim 17, 
wherein the received information comprises at least one of fault information, hardware configuration 
information, and software configuration information about the computer-based system. 

28. (currently amended) The computer-readable storage medium according to claim 17, 
further comprising the step of: 

determining a difficulty value for reducing the exposure level. 

29. (currently amended) The computer-readable storage medium according to claim 28, 
further comprising the step of: 

outputting the difficulty value. 
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30. (currently amended) The computer-readable storage medium according to claim 28, 
further comprising the step of: 

determining a cost associated with reducing the exposure level. 

31. (currently amended) The computer-readable storage medium according to claim 30, 
further comprising the step of: 

outputting the cost. 

32. (currently amended) The computer-readable storage medium according to claim 17, 
further comprising the steps of: 

calculating at least a second risk level at which the computer-based system operates based on 
the received information; and 

trending the risk level and the at least second risk level by calculating a moving average of 
the risk levels for the computer-based system. 

33. (currently amended) A data processing system comprising: 

a memory comprising a program that asynchronously receives information about a computer- 
based system by subscribing to the information , and calculates a risk level at which the computer- 
based system operates based on the received information; and 

a processing unit that runs the program. 

34. (original) The data processing system according to claim 33, wherein the program 
further outputs the calculated risk level. 

35. (original) The data processing system according to claim 33, wherein the program 
further calculates an exposure level to failure of the computer-based system based on the received 
information, and calculates a confidence level of the exposure level, wherein the risk level is 
calculated based on the exposure level and confidence level. 

36. (original) The data processing system according to claim 35, wherein the risk level is 
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calculated using the formula: 

risk level = exposure level * confidence level / a mitigating factor, 

where the mitigating factor is a value associated with the computer-based system. 

37. (original) The data processing system according to claim 35, wherein the confidence 
level is increased each time the exposure level for the computer-based system is calculated and 
exceeds a predetermined value. 

38. (original) The data processing system according to claim 35, wherein a rule engine is 
used to calculate the exposure level, the rule engine asynchronously receiving the information about 
the computer-based system as an input, and outputting the exposure level as an output. 

39. (original) The data processing system according to claim 38, wherein the rule engine 
comprises a plurality of rule engines each operating asynchronously; and wherein the risk level is 
calculated based on the exposure levels output from at least one of the rule engines. 

40. (original) The data processing system according to claim 33, wherein the computer- 
based system is at least one of a data processing system, a component of a data processing system, 
and a computer program. 

41. (canceled). 

42. (original) The data processing system according to claim 33, wherein the risk level is 
published to a network connected to the data processing system. 

43. (original) The data processing system according to claim 33, wherein the received 
information comprises at least one of fault information, hardware configuration information, and 
software configuration information about the computer-based system. 

44. (original) The data processing system according to claim 33, wherein the program 
further determines a difficulty value for reducing the exposure level. 
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45. (original) The method according to claim 44, wherein the program further outputs the 
difficulty value. 

46. (original) The data processing system according to claim 44, wherein the program 
further determines a cost associated with reducing the exposure level. 

47. (original) The data processing system according to claim 46, wherein the program 
further outputs the cost. 

48. (original) The data processing system according to claim 33, wherein the program 
further calculates at least a second risk level at which the computer-based system operates based on 
the received information, and trends the risk level and the at least second risk level by calculating a 
moving average of the risk levels for the computer-based system. 

49. (currently amended) A data processing system comprising: 

means for asynchronously receiving information about a computer-based system by 
subscribing to the information ; and 

means for calculating a risk level at which the computer-based system operates based on the 
received information. 
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